Method, system and product for determining standard Java objects

Abstract

Java class information is analyzed to determine if the code is standard for its particular class, and thus belongs to impliedly trustworthy software. An analysis tool performs a pre-analysis to train itself on standard class data for standard implementations of the object type and non-standard class data for non-standard implementations of the object type, and then performs a dynamic analysis of a received Java program to determine if its class data matches the criteria for a standard implementation of the object class.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS[0001]The present application is related to the following co-pending U.S. patent applications filed on even date herewith, and incorporated herein by reference in their entirety:[0002]Ser. No. 10 / 881,969, entitled “METHOD, SYSTEM AND PROGRAM PRODUCT FOR EVALUATING JAVA SOFTWARE BEST PRACTICES ACROSS MULTIPLE VENDORS”[0003]Ser. No. 10 / 881,973, entitled “METHOD, SYSTEM AND PROGRAM PRODUCT FOR DETERMINING JAVA SOFTWARE CODE PLAGIARISM AND INFRINGEMENT”[0004]Ser. No. 10 / 881,968, entitled “METHOD, SYSTEM AND PROGRAM PRODUCT FOR OPTIMIZING JAVA APPLICATION PERFORMANCE THROUGH DATA MINING”BACKGROUND OF THE INVENTION[0005]1. Field of the Invention[0006]The present invention relates to computer systems, software architectures and programs, and more particularly to a method, system and computer program product for determining standard Java programs.[0007]2. Description of the Related Art[0008]Java is a robust, portable object-oriented programming languag...

AI Technical Summary

Problems solved by technology

Unfortunately, this is often not possible, as many distributions only provide the compiled code, and inferring information from the compiled code of a Java application is extremely difficult.

However, it is difficult to determine from the byte code alone whether a JVM distribution is standard or non-standard.

Since users don't know whether the code they download is standard or non-standard, they are unable to assess the risk the code presents to their computer security.

However, this is a complicated and expensive process.

As a consequence, people who download Java code from various third-party Web sites commonly are forced to implicitly trust the source that gave them the code.

Images